Study. uk . com
  1. Home
  2. All questions
  3. Question 378

CompTIA Security+ study material · question 378 of 611

Why does patching an industrial control system follow different rules from patching an office server?

  1. Industrial systems have no vulnerabilities
  2. They cannot run vendor-supplied patches
  3. They are excluded from asset inventories
  4. They prioritise availability and safety, which inverts the usual assumptions about downtime
Show the answer

Answer: D. They prioritise availability and safety, which inverts the usual assumptions about downtime

A reboot that is routine on a server can stop a physical process, so the risk calculation is different.

Source: NIST SP 800-40 Rev. 4 (NIST) — SP 800-40 Rev. 4 § 1.1 Purpose and Scope

Challenge yourself on this topic → Study as cards